Tech Banker vulnerabilities
4 vulnerabilities
Known vulnerabilities in Tech Banker products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 3 products.
Products
3- Contact Bank2 vulnerabilities
- Captcha Bank1 vulnerabilities
- Gallery Bank1 vulnerabilities
CVE-2014-8758tech-bankergallery_bank+1
EPSS score1.18%
Cross-site scripting (XSS) vulnerability in Best Gallery Albums Plugin before 3.0.70for WordPress allows remote attackers to inject arbitrary web script or HTML via the order_id parameter in the gallery_album_sorting page to wp-admin/admin.php.CVE-2014-3841tech-bankercontact_bank+1EPSS score1.95%
Cross-site scripting (XSS) vulnerability in the Contact Bank plugin before 2.0.20 for WordPress allows remote attackers to inject arbitrary web script or HTML via the Label field, related to form layout configuration. NOTE: some of these details are obtained from third party information.CVE-2022-3350tech-bankercontact_bank+2EPSS score0.55%
The Contact Bank WordPress plugin through 3.0.30 does not sanitise and escape some of its Form settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)CVE-2024-9375contact-bankerwordpress captcha plugin by captcha bank+3EPSS score0.32%
The WordPress Captcha Plugin by Captcha Bank plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 4.0.36. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.